Skip to content

CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-66374

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.

Read JSON ↗CVE.org ↗

Status: Published
Published: 2026-07-25
Updated: 2026-07-27
Assigning organization: mitre

Description

Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

nic Knot Resolver

Default version status: unaffected

0 to < 6.4.1affected

References